Cyber Security Jobs

• Toronto, Canada
• Hybrid · 2 days in office
• CA$150,000 – CA$210,000 pa
• Senior

Owns the strategy and roadmap for CrowdStrike's Falcon Privileged Access product, driving just-in-time access, secrets management, and session brokering across endpoint, cloud, and infrastructure. Works with designers and cross-product teams to build frictionless, AI-native PAM experiences, and acts as the internal and external expert for the domain.

CrowdStrike Falcon · CyberArk · BeyondTrust +7

• Arlington, United States
• Hybrid · 2 days in office
• US$140,000 – US$220,000 pa
• Senior

Owns the strategy and roadmap for CrowdStrike's Falcon Privileged Access product, driving just-in-time access, secrets management, session brokering and zero standing privileges across endpoint, cloud and infrastructure. Works with designers and other product teams to build frictionless, AI-native PAM experiences, acting as the internal and external expert on the domain.

CrowdStrike Falcon · CyberArk · BeyondTrust +7

• Newbury
• Senior

Monitors and manages network equipment and infrastructure for customer services across EMEA and North America, with a strong focus on firewall and network security administration. Day-to-day work covers Cisco ASA, Firepower and Palo Alto firewalls, VMware vSphere and NetApp storage, plus automation and out-of-hours support on a rota.

Cisco ASA · Cisco Firepower Threat Defense · Palo Alto PA-Series +7

• Lisbon, Portugal
• Senior

Owns the product strategy and roadmap for identity verification solutions, covering KYC, AML and biometrics, and drives adoption across EMEA financial services. Works with engineering, design, sales and marketing on SaaS launches, KPIs and go-to-market, while mentoring junior product managers.

eIDAS 2.0

• United Kingdom
• Remote
• Senior · manages people

Leads incident response engagements for customers hit by cyberattacks, directing a team of consultants, running kick-off and daily update calls, and delegating forensic tasks. Handles multiple ransomware and BEC investigations concurrently, performing root cause analysis and producing executive-summary reports mapped to MITRE ATT&CK.

Splunk · ELK · Sophos

• Leeds
• Hybrid · 3 days in office
• £45,000 – £50,000 pa
• Mid-level
• Permanent

Support the development and operation of security controls, analyse threat intelligence, manage vulnerabilities and help with incident response across a global technology estate. Work with Azure and Microsoft security tooling such as Sentinel, Defender and Intune, alongside SIEM, EDR and firewalls, in a hybrid Leeds team.

Microsoft Azure · Microsoft Sentinel · Microsoft Defender for Endpoint +7

• Norwich
• £20,409 pa
• Entry level
• Contract

Develops quantum-resilient security for connected and autonomous vehicular systems, evaluating post-quantum cryptographic techniques in resource-constrained 6G-enabled networks. Combines system modelling, simulation and algorithmic implementation to study trade-offs between security strength, computational overhead and communication latency, with adaptive key management and optimisation for low-latency, scalable deployment.

6G

• London
• Hybrid · 2–3 days in office
• £55,000 – £65,000 pa
• Senior

Owns the entire IT estate for a cybersecurity SaaS company, covering identity and access management, macOS device management, SaaS administration and end-to-end joiners, movers and leavers. An engineering-led role focused on automation, AI enablement and security controls that support SOC 2, ISO 27001 and Cyber Essentials Plus audits, working alongside the Director of Information Security and a Senior SecOps Engineer.

macOS · MDM · SSO +6

• Liverpool
• Hybrid
• £60,000 – £65,000 pa
• Senior
• Contract

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.

SIEM · IAM · DLP +1

• Cardiff
• Hybrid
• £40,000 – £45,000 pa
• Mid-level

Client-facing technical role in a Microsoft-focused security partner's Cyber Security Delivery Team, acting as a trusted point of contact for customers. Day to day involves tuning Defender and Entra controls, building KQL detections in Microsoft Sentinel, running phishing simulations and vulnerability scans, and supporting incident response and reporting.

Microsoft Defender XDR · Microsoft Entra · Defender for Cloud Apps +7

• Birmingham
• Hybrid
• £35,000 – £50,000 pa
• Senior

A newly created role at the heart of service delivery for a growing managed services team, focused on improving automation, security, monitoring, patch management and endpoint management across a diverse customer base. The engineer leads development of service standards and tooling, builds PowerShell and API automation, manages RMM platforms, and acts as senior escalation point for infrastructure, endpoint, security, networking and backup issues, working closely with projects, support and service delivery teams.

Microsoft 365 · Windows Server · Entra ID +6

• Cheltenham
• Hybrid
• Mid-level
• Permanent

Research new and innovative solutions to challenging client problems and assess existing client solutions to prove or disprove their security fundamentals. Contribute to team growth through knowledge sharing and mentoring, within a newly formed National Security Business Unit working on varied client projects.

• Manchester
• Hybrid
• £60,000 – £75,000 pa
• Mid-level

Lead and evolve the security, privacy and governance framework for a UK software business, acting as Data Protection Officer. Day to day you own the ISMS and ISO 27001/Cyber Essentials Plus certifications, run UK GDPR and DPIA work, build AI governance, manage cyber risk and supplier assurance, and present to board-level stakeholders.

ISO 27001 · Cyber Essentials Plus

• Manchester
• Hybrid
• Permanent

Proactively hunts advanced threats across customer environments using a proprietary hunting framework, conducting intelligence-led, hypothesis-driven analysis of TTPs and behaviours. Works cross-functionally with SOC Analysts, Global Detection Engineers, Privacy and Engineering teams to align threat models and mitigate risks.

• Cambridge
• On-site
• Mid-level
• Permanent

Consultants assess critical systems for cyber-physical vulnerabilities, combining deep hardware research, testing and reverse engineering with rapid prototyping of proof-of-concept demonstrators. Work spans niche defence and national security projects, interfacing with hardware via protocols like JTAG and UART and using test equipment such as oscilloscopes. The role is fully on-site in Cambridge labs within a flat, collaborative ~40-person consultancy.

JTAG · UART · Oscilloscopes